CVE-2013-5095: XSS

Published Aug 16, 2013

Updated

Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469.

Affected Software

9 affected components

Juniper Junos Space=11.1

Juniper Junos Space=11.2

Juniper Junos Space=11.3

Juniper Junos Space=11.4

Juniper Junos Space=12.1

Juniper Junos Space=12.2

Juniper Junos Space=12.3

Juniper Junos Space Virtual Appliance

Juniper Junos Space Ja1500 Appliance

Event History

Aug 16, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5095?

CVE-2013-5095 is classified as having a medium severity due to its potential for cross-site scripting attacks.

How do I fix CVE-2013-5095?

To fix CVE-2013-5095, upgrade to Junos Space version 13.1R1.6 or later.

What systems are affected by CVE-2013-5095?

CVE-2013-5095 affects multiple versions of Junos Space, including 11.1 through 12.3, as well as the Junos Space JA1500 appliance.

What kind of vulnerability is CVE-2013-5095?

CVE-2013-5095 is a cross-site scripting (XSS) vulnerability that allows injection of arbitrary web scripts or HTML.

Can CVE-2013-5095 be exploited remotely?

Yes, CVE-2013-5095 can be exploited remotely by attackers to inject harmful scripts.